<div dir="ltr">OK, so my firewall guys were, um, let's say 'misinformed...'<div><br></div><div>I grabbed packet captures from both Expressways, saw 1719 UDP RAS messages being sent on both sides and neither one receiving them.... sent them off to the firewall weirdos, they said, 'oh...' and then add an allow and the error cleared.</div><div><br></div><div>Yay.</div><div><br></div><div>Jonathan</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, May 13, 2022 at 9:25 AM Jonathan Charles <<a href="mailto:jonvoip@gmail.com">jonvoip@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir="ltr">I am seeing H.225 RAS messages being sent and not replied to on both E's... all UDP 1719...<div><br></div><div>My firewall guys say they see no port 1719 traffic, but the pcaps show 1719...</div><div><br></div><div>Joy.</div><div><br></div><div><br></div><div>Jonathan</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Fri, May 13, 2022 at 9:11 AM Adam Pawlowski <<a href="mailto:ajp26@buffalo.edu" target="_blank">ajp26@buffalo.edu</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div lang="EN-US">
<div>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">We ran into something similar in the past where things get generated in the background but aren’t visible in the GUI.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">Traversal zones that allocate ports for disabled protocols, but then throw an alarm about port conflicts as they’re configured.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)">From what I can tell, LocalZone should have been a zone in VCS land, but has since disappeared from Expressway. It may be floating in the background somewhere
and may be worth a look through the xapi to see if it’s visible and get poked.<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><b><span style="font-size:11pt;font-family:Arial,sans-serif;color:rgb(0,112,192)">Adam Pawlowski</span></b><span style="font-size:11pt;font-family:"Segoe UI",sans-serif;color:rgb(31,73,125)"><u></u><u></u></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:11pt;font-family:Arial,sans-serif;color:black">Network Engineer | Network and Communication Services</span><span style="font-size:11pt;font-family:"Segoe UI",sans-serif;color:rgb(31,73,125)"><u></u><u></u></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:11pt;font-family:Arial,sans-serif;color:black">University at Buffalo Information Technology (UBIT) </span><span style="font-size:11pt;font-family:"Segoe UI",sans-serif;color:rgb(31,73,125)"><u></u><u></u></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:11pt;font-family:Arial,sans-serif;color:black">243 Computing Center, Buffalo, NY 14260 <u></u><u></u></span></p>
<p class="MsoNormal" style="vertical-align:baseline"><span style="font-size:11pt;font-family:Arial,sans-serif;color:black"><img width="405" height="21" style="width: 4.2187in; height: 0.2187in;" id="gmail-m_2145615509461134864gmail-m_-2663605953573770909Picture_x0020_1" src="cid:180bdce6f244cff311" alt="contact_line"></span><span style="font-size:11pt;font-family:"Segoe UI",sans-serif;color:rgb(31,73,125)"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11pt;font-family:Calibri,sans-serif;color:rgb(31,73,125)"><u></u> <u></u></span></p>
<div style="border-top:none;border-right:none;border-bottom:none;border-left:1.5pt solid blue;padding:0in 0in 0in 4pt">
<div>
<div style="border-right:none;border-bottom:none;border-left:none;border-top:1pt solid rgb(225,225,225);padding:3pt 0in 0in">
<p class="MsoNormal"><b><span style="font-size:11pt;font-family:Calibri,sans-serif">From:</span></b><span style="font-size:11pt;font-family:Calibri,sans-serif"> cisco-voip <<a href="mailto:cisco-voip-bounces@puck.nether.net" target="_blank">cisco-voip-bounces@puck.nether.net</a>>
<b>On Behalf Of </b>Jonathan Charles<br>
<b>Sent:</b> Thursday, May 12, 2022 5:10 PM<br>
<b>To:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> [cisco-voip] Expressway Clustering...<u></u><u></u></span></p>
</div>
</div>
<p class="MsoNormal"><u></u> <u></u></p>
<div>
<p class="MsoNormal">Howdy! <u></u><u></u></p>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">We are seeing an error on our Expressway E nodes right after we form a cluster.<u></u><u></u></p>
<div>
<p class="MsoNormal">The cluster is up and fully operational, however, we get:<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Peer Not Responding<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal">A peer address for the LocalZone local zone is down and unreachable.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">It then tells you to check the zones page and verify the failing peer address...<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">There are no zones configured, as of yet... just the DefaultZone and it has no option for peers to be configured.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">The LocalZone also has no peer configuration as an option.<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Any ideas?<u></u><u></u></p>
</div>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Thanks!<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
<div>
<p class="MsoNormal">Jonathan<u></u><u></u></p>
</div>
</div>
</div>
</div>
</div>
</blockquote></div>
</blockquote></div>